Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa
File: 323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa (raw, json)
Hash identifier: 73VxTmrHcDclfyzWD2NvLWhlyqOOmciv8mqD3YTP4Lo=
Subject key identifier: 9E:DD:17:71:8E:E3:6A:E2:B9:51:01:C8:60:11:90:7A:AB:36:E3:06
Certificate issuer: /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial: 74B3C4CE26F9AB821D898BDDD64563D4B91CD91E
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa
Signing time: Thu 06 Mar 2025 08:42:16 +0000
ROA not before: Thu 06 Mar 2025 08:37:16 +0000
ROA not after: Thu 05 Mar 2026 08:42:16 +0000
asID: 262354
IP address blocks: 2804:828:c130::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b3:c4:ce:26:f9:ab:82:1d:89:8b:dd:d6:45:63:d4:b9:1c:d9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Validity
Not Before: Mar 6 08:37:16 2025 GMT
Not After : Mar 5 08:42:16 2026 GMT
Subject: CN=9EDD17718EE36AE2B95101C86011907AAB36E306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:92:c0:cf:da:2f:30:de:9d:c6:5e:14:db:
fb:20:f6:32:e4:d4:ee:fb:d7:01:5b:00:61:8d:42:
20:6b:e3:12:f6:87:d7:fc:b7:62:ba:a4:a1:b7:a7:
86:8b:4b:7a:5f:ae:09:ec:a3:2a:8c:a8:13:46:e2:
e8:72:21:9f:04:70:f9:a3:bb:b7:44:d8:28:87:13:
45:56:a8:e3:7d:32:c9:98:1d:8c:70:63:d9:08:58:
0b:ac:5e:74:28:73:27:d2:1b:64:e0:b7:48:af:60:
f8:be:e6:2d:ef:6c:98:7a:c8:b6:93:f6:2d:33:90:
63:c9:1b:26:b3:07:a1:c5:ad:59:16:7d:16:3b:f4:
a5:67:dd:8f:cb:74:80:92:9e:54:80:c3:3a:b2:47:
8e:c0:c9:d1:89:82:1f:63:f2:10:8d:e4:0a:aa:5c:
5f:74:3b:34:d4:05:97:f6:cb:96:3f:2e:89:bf:d2:
9f:b6:b8:96:ac:f6:09:48:ee:16:b8:e7:4e:ee:f5:
1c:fa:c0:db:3c:8e:4e:e3:9b:53:0d:d6:da:60:66:
03:0a:55:c0:80:b9:8b:b8:ec:40:9d:b1:a4:43:28:
0a:93:15:b8:94:1f:f0:e5:26:6d:e1:e9:7f:e3:99:
a5:3c:40:a1:cc:b0:ef:90:63:94:17:17:d8:9f:b8:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DD:17:71:8E:E3:6A:E2:B9:51:01:C8:60:11:90:7A:AB:36:E3:06
X509v3 Authority Key Identifier:
keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:828:c130::/47
Signature Algorithm: sha256WithRSAEncryption
75:77:5f:6c:88:a8:f0:f0:84:f6:fb:ee:8c:df:67:14:56:d1:
7f:2e:e8:e7:cb:d1:78:ea:dd:00:aa:82:74:03:6e:98:d3:9f:
fe:06:95:44:6a:6d:1b:07:37:10:73:45:aa:1c:27:ac:46:6c:
96:f3:86:83:31:b9:a8:8d:57:7b:06:0b:38:67:e2:bb:57:1f:
20:e6:d1:3c:b5:4c:91:f7:88:24:16:8a:30:af:a1:4d:63:ea:
52:69:c9:6a:a4:1d:b0:e8:d8:dd:8f:91:db:d8:70:e8:eb:77:
c4:11:23:c0:a8:2e:5e:45:2f:23:66:34:46:00:a7:33:3f:fe:
c4:f3:ff:7d:0b:ce:a6:de:17:b8:a1:78:10:86:e8:2e:db:da:
9a:99:3a:11:a6:44:23:5b:0a:05:f1:7c:4b:39:b7:45:0d:93:
f4:80:02:3f:ac:69:57:39:7e:de:79:4f:01:e9:2b:a2:5a:4d:
4d:c1:b8:cf:d6:09:2e:f0:3a:c6:b5:19:02:bc:58:ec:22:05:
9a:02:19:6e:0c:87:98:42:0a:fe:27:59:bf:54:28:e0:8b:92:
e7:5a:e6:1d:8a:b0:b2:bb:ea:3d:62:86:67:92:9d:e1:b9:10:
28:7d:a5:82:9c:83:c2:e4:74:d8:87:1e:9a:aa:df:16:83:db:
13:fd:9e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:50 2025 by rpki-client